<meta http-equiv="Content-Security-Policy" content="default-src 'self'">
<script type='text/javascript'>window.__inlineScriptValue = 42;</script>";